$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/17e43f49-f8b8-3d00-bd7c-8d10e19cffbd.roa File: 17e43f49-f8b8-3d00-bd7c-8d10e19cffbd.roa (raw, json) Hash identifier: Q0gFVCeUWalc+O2a5jLunepOhGgxHnp5b98LFzetegM= Subject key identifier: E5:B9:37:4B:89:FE:50:A0:98:03:FE:9D:D0:B1:80:78:89:89:41:33 Certificate issuer: /CN=d724146a-c9cc-45b0-8278-6947cf5ce1b2 Certificate serial: 010D0C9F4328584B004BF0914E4BAA2FE3FCB858 Authority key identifier: D7:BB:AD:49:20:FA:30:49:9E:A2:FE:08:51:EE:B8:F7:9F:F9:DA:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/17e43f49-f8b8-3d00-bd7c-8d10e19cffbd.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 7768 IP address blocks: 216.20.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/d724146a-c9cc-45b0-8278-6947cf5ce1b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/d724146a-c9cc-45b0-8278-6947cf5ce1b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f0:91:4e:4b:aa:2f:e3:fc:b8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d724146a-c9cc-45b0-8278-6947cf5ce1b2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=9336806a-250d-4cae-9912-d770dbd35e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:25:8f:15:2a:de:69:02:52:d7:b8:0d:da:3d: da:5e:b2:f1:1a:d8:c8:83:d9:26:7c:f7:94:1b:57: 89:a6:2e:41:e4:cf:28:1e:b2:7c:61:a3:7e:5e:d7: 16:13:01:ae:0e:b8:c3:f6:38:a2:85:33:de:e6:f5: c0:7e:9c:ae:2e:92:64:94:88:8b:d0:ce:33:a7:cd: 50:bd:a4:00:fc:ef:68:80:12:d0:f5:85:91:1e:ec: f0:35:d6:82:54:99:3d:3c:82:56:73:58:8e:87:ec: 05:b4:01:63:74:c9:78:66:9c:6d:bd:52:39:35:56: 30:f8:a2:63:3a:55:93:3e:37:ed:e0:81:43:ff:cf: 1b:b3:2b:2c:52:f8:58:1d:c9:2a:58:39:e8:0f:9c: a9:c2:eb:66:c6:4a:15:44:eb:eb:6a:84:ec:34:43: 42:25:c4:62:79:53:8c:7d:d6:db:d2:3a:d3:f7:b4: aa:4e:8a:95:c4:d6:59:60:02:5d:94:13:c1:79:8b: 9a:01:9b:35:ae:bf:16:b8:14:c2:a1:ff:66:d8:cb: 4e:b9:27:8a:9b:e8:c4:dc:cc:26:32:34:1a:96:a0: 86:ad:d2:8f:50:b1:c2:1d:fc:f6:08:92:69:48:1e: 96:8f:2a:92:4b:de:7c:29:8e:7d:4d:f4:ea:f7:7d: 70:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B9:37:4B:89:FE:50:A0:98:03:FE:9D:D0:B1:80:78:89:89:41:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/17e43f49-f8b8-3d00-bd7c-8d10e19cffbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/d724146a-c9cc-45b0-8278-6947cf5ce1b2.crl X509v3 Authority Key Identifier: keyid:D7:BB:AD:49:20:FA:30:49:9E:A2:FE:08:51:EE:B8:F7:9F:F9:DA:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2.cer sbgp-ipAddrBlock: critical IPv4: 216.20.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:6b:49:6f:df:99:21:a2:18:65:01:5e:e4:51:41:21:40:b5: 57:56:0f:7a:21:d5:47:d5:74:1a:27:9a:72:19:bd:5f:13:45: 52:f5:be:ea:3c:9b:ea:ab:b2:1f:1c:e1:20:59:ee:aa:44:b2: e3:f4:ce:2c:36:b6:56:4e:d6:f2:34:4f:c8:bc:e5:90:3f:39: 5c:e0:4b:5a:79:3a:dd:6b:0a:32:2d:71:d7:f1:8e:09:e9:a5: 4c:3f:63:6d:71:23:7d:de:a8:1c:8d:7e:de:50:b5:aa:4a:7c: ec:b0:3d:01:73:21:d8:4e:a9:83:bc:c9:bc:79:1b:4c:19:5b: 90:f9:4b:9e:ec:6d:65:95:ee:71:04:b4:02:1c:70:ac:6d:5f: bb:da:85:23:9f:88:0d:97:b1:80:61:42:b4:9b:5a:fa:0d:c6: 2f:20:1a:df:ad:37:c5:cc:57:3d:5e:65:43:96:c7:63:81:fc: d8:91:a7:b7:81:7b:20:1b:81:3e:15:ac:e1:2b:8f:5e:6b:9b: 76:39:3e:bb:c8:b7:58:bb:8e:ea:3c:a0:3f:91:d7:f7:fb:79: 08:af:e0:b7:c3:48:6b:76:a0:36:3d:b8:af:94:bd:20:5e:25: c5:b6:11:b0:5f:ce:b2:ac:39:2a:83:68:2d:72:81:b2:42:4f: 9d:c3:75:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/CRTkuqL+P8uFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyNDE0NmEtYzljYy00NWIwLTgyNzgtNjk0N2NmNWNl MWIyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk OTMzNjgwNmEtMjUwZC00Y2FlLTk5MTItZDc3MGRiZDM1ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iWPFSreaQJS17gN2j3aXrLxGtjIg9kmfPeU G1eJpi5B5M8oHrJ8YaN+XtcWEwGuDrjD9jiihTPe5vXAfpyuLpJklIiL0M4zp81Q vaQA/O9ogBLQ9YWRHuzwNdaCVJk9PIJWc1iOh+wFtAFjdMl4ZpxtvVI5NVYw+KJj OlWTPjft4IFD/88bsyssUvhYHckqWDnoD5ypwutmxkoVROvraoTsNENCJcRieVOM fdbb0jrT97SqToqVxNZZYAJdlBPBeYuaAZs1rr8WuBTCof9m2MtOuSeKm+jE3Mwm MjQalqCGrdKPULHCHfz2CJJpSB6WjyqSS958KY59TfTq931wlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW5N0uJ/lCgmAP+ndCxgHiJiUEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNzI0 MTQ2YS1jOWNjLTQ1YjAtODI3OC02OTQ3Y2Y1Y2UxYjIvMTdlNDNmNDktZjhiOC0z ZDAwLWJkN2MtOGQxMGUxOWNmZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDcyNDE0NmEtYzljYy00NWIwLTgy NzgtNjk0N2NmNWNlMWIyL2Q3MjQxNDZhLWM5Y2MtNDViMC04Mjc4LTY5NDdjZjVj ZTFiMi5jcmwwHwYDVR0jBBgwFoAU17utSSD6MEmeov4IUe6495/52oQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNzI0MTQ2YS1jOWNjLTQ1YjAtODI3OC02OTQ3 Y2Y1Y2UxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BSkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVrSW/fmSGiGGUBXuRRQSFAtVdWD3oh1UfVdBonmnIZvV8TRVL1vuo8 m+qrsh8c4SBZ7qpEsuP0ziw2tlZO1vI0T8i85ZA/OVzgS1p5Ot1rCjItcdfxjgnp pUw/Y21xI33eqByNft5QtapKfOywPQFzIdhOqYO8ybx5G0wZW5D5S57sbWWV7nEE tAIccKxtX7vahSOfiA2XsYBhQrSbWvoNxi8gGt+tN8XMVz1eZUOWx2OB/NiRp7eB eyAbgT4VrOErj15rm3Y5PrvIt1i7juo8oD+R1/f7eQiv4LfDSGt2oDY9uK+UvSBe JcW2EbBfzrKsOSqDaC1ygbJCT53DdZg= -----END CERTIFICATE-----Generated at Tue Oct 14 01:48:05 2025 by rpki-client